rhythia-api 207.0.0 → 209.0.0

package/api/editProfile.ts

@@ -34,22 +34,33 @@ export async function POST(request: Request): Promise<NextResponse> {
 export async function handler(
   data: (typeof Schema)["input"]["_type"]
 ): Promise<NextResponse<(typeof Schema)["output"]["_type"]>> {
-  if (data.data.username !== undefined && data.data.username.length === 0) {
-    return NextResponse.json(
-      {
-        error: "Username can't be empty",
-      },
-      { status: 404 }
-    );
-  }
+  if (data.data.username !== undefined) {
+    if (data.data.username.length < 3) {
+      return NextResponse.json(
+        {
+          error: "Username must be at least 3 characters long",
+        },
+        { status: 404 }
+      );
+    }
 
-  if (data.data.username && data.data.username.length > 20) {
-    return NextResponse.json(
-      {
-        error: "Username too long.",
-      },
-      { status: 404 }
-    );
+    if (data.data.username.length > 20) {
+      return NextResponse.json(
+        {
+          error: "Username too long.",
+        },
+        { status: 404 }
+      );
+    }
+
+    if (!/^[a-z0-9]+$/i.test(data.data.username)) {
+      return NextResponse.json(
+        {
+          error: "Username can only contain letters (a-z) and numbers (0-9)",
+        },
+        { status: 404 }
+      );
+    }
   }
 
   if (validator.trim(data.data.username || "") !== (data.data.username || "")) {

package/api/executeAdminOperation.ts

@@ -11,6 +11,8 @@ const adminOperations = {
   deleteUser: z.object({ userId: z.number() }),
   changeFlag: z.object({ userId: z.number(), flag: z.string() }),
   changeBadges: z.object({ userId: z.number(), badges: z.string() }),
+  addBadge: z.object({ userId: z.number(), badge: z.string() }),
+  removeBadge: z.object({ userId: z.number(), badge: z.string() }),
   excludeUser: z.object({ userId: z.number() }),
   restrictUser: z.object({ userId: z.number() }),
   silenceUser: z.object({ userId: z.number() }),
@@ -73,6 +75,14 @@ const OperationParam = z.discriminatedUnion("operation", [
     operation: z.literal("changeBadges"),
     params: adminOperations.changeBadges,
   }),
+  z.object({
+    operation: z.literal("addBadge"),
+    params: adminOperations.addBadge,
+  }),
+  z.object({
+    operation: z.literal("removeBadge"),
+    params: adminOperations.removeBadge,
+  }),
   z.object({
     operation: z.literal("getScoresPaginated"),
     params: adminOperations.getScoresPaginated,
@@ -217,7 +227,55 @@ export async function handler(
             })
             .select();
         }
+        break;
+
+      case "addBadge":
+        // Allow only developers to modify badges.
+        if ((queryUserData.badges as string[]).includes("Developer")) {
+          // Get current badges
+          const { data: targetUser } = await supabase
+            .from("profiles")
+            .select("badges")
+            .eq("id", params.userId)
+            .single();
+          
+          const currentBadges = (targetUser?.badges || []) as string[];
+          if (!currentBadges.includes(params.badge)) {
+            currentBadges.push(params.badge);
+            result = await supabase
+              .from("profiles")
+              .upsert({
+                id: params.userId,
+                badges: currentBadges,
+              })
+              .select();
+          } else {
+            result = { data: targetUser, error: null };
+          }
+        }
+        break;
 
+      case "removeBadge":
+        // Allow only developers to modify badges.
+        if ((queryUserData.badges as string[]).includes("Developer")) {
+          // Get current badges
+          const { data: targetUser } = await supabase
+            .from("profiles")
+            .select("badges")
+            .eq("id", params.userId)
+            .single();
+          
+          const currentBadges = (targetUser?.badges || []) as string[];
+          const updatedBadges = currentBadges.filter(b => b !== params.badge);
+          
+          result = await supabase
+            .from("profiles")
+            .upsert({
+              id: params.userId,
+              badges: updatedBadges,
+            })
+            .select();
+        }
         break;
 
       case "getScoresPaginated":
@@ -228,30 +286,14 @@ export async function handler(
             `
             id,
             awarded_sp,
-            created_at,
-            misses,
-            mods,
-            passed,
-            songId,
-            speed,
-            spin,
             userId,
-            beatmapHash,
             additional_data,
-            beatmaps (
-              difficulty,
-              noteCount,
-              title,
-              starRating,
-              image,
-              imageLarge
-            ),
             profiles (
-              username,
-              avatar_url
+              username
             )
           `
           )
+          .eq("passed", true)
           .order("created_at", { ascending: false })
           .range(offset, offset + params.limit - 1);
 
@@ -268,31 +310,8 @@ export async function handler(
             const transformed: any = {
               id: score.id,
               awarded_sp: score.awarded_sp,
-              created_at: score.created_at,
-              misses: score.misses,
-              mods: score.mods,
-              passed: score.passed,
-              songId: score.songId,
-              speed: score.speed,
-              spin: score.spin,
               userId: score.userId,
-              beatmapHash: score.beatmapHash,
-              beatmap: score.beatmaps
-                ? {
-                    difficulty: score.beatmaps.difficulty,
-                    noteCount: score.beatmaps.noteCount,
-                    title: score.beatmaps.title,
-                    starRating: score.beatmaps.starRating,
-                    image: score.beatmaps.image,
-                    imageLarge: score.beatmaps.imageLarge,
-                  }
-                : null,
-              profile: score.profiles
-                ? {
-                    username: score.profiles.username,
-                    avatar_url: score.profiles.avatar_url,
-                  }
-                : null,
+              username: score.profiles?.username || null,
             };
 
             if (params.includeAdditionalData) {

package/api/getProfile.ts

@@ -98,13 +98,8 @@ export async function handler(
           avatar_url:
             "https://rhthia-avatars.s3.eu-central-003.backblazeb2.com/user-avatar-1725309193296-72002e6b-321c-4f60-a692-568e0e75147d",
           badges: [],
-          username: `${user.user_metadata.full_name.slice(0, 20)}${Math.round(
-            Math.random() * 900000 + 100000
-          )}`,
-          computedUsername: `${user.user_metadata.full_name.slice(
-            0,
-            20
-          )}${Math.round(Math.random() * 900000 + 100000)}`.toLowerCase(),
+          username: `user${Math.round(Math.random() * 900000 + 100000)}`,
+          computedUsername: `user${Math.round(Math.random() * 900000 + 100000)}`.toLowerCase(),
           flag: (geo.country || "US").toUpperCase(),
           created_at: Date.now(),
         }).select(`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rhythia-api",
-  "version": "207.0.0",
+  "version": "209.0.0",
   "main": "index.ts",
   "author": "online-contributors-cunev",
   "scripts": {

package/.claude/settings.local.json

@@ -1,8 +0,0 @@
-{
-  "permissions": {
-    "allow": [
-      "Bash(yarn update)"
-    ],
-    "deny": []
-  }
-}